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In a previous paper, a statistical analysis of runway incursion (RI) events was conducted 
to ascertain their relevance to the top ten Technical Challenges (TC) of the National 
Aeronautics and Space Administration (NASA) Aviation Safety Program (AvSP). The study 
revealed connections to perhaps several of the AvSP top ten TC. That data also identified 
several primary causes and contributing factors for RI events that served as the basis for 
developing a system-level Bayesian Belief Network (BBN) model for RI events. The system- 
level BBN model will allow NASA to generically model the causes of RIevents and to assess 
the effectiveness of technology products being developed under NASA funding. These 
products are intended to reduce the frequency of RI events in particular, and to improve 
runway safety in general. The development, structure and assessment of that BBN for RI 
events by a Subject Matter Expert panel are documented in this paper. 


Nomenclature 

AC = Aircraft 

ASIAS = FAA Safety Information Analysis and Sharing 

ATADS = Air - Traffic Activity Data System 

ATC = Air - Traffic Control 

AvSP = NASA Aviation Safety Program 

BBN = Bayesian Belief Network 

Comm = Communications 

CPT = Conditional Probability Table 

FAA = Federal Aviation Administration 

FAR = Federal Aviation Regulation 

HFACS = Human Factors Analysis and Classification System 

KE = Knowledge Elicitation 

NASA = National Aeronautics and Space Administration 

PED = Pedestrian 

RI = Runway Incursion 

RW = Runway 

SME = Subject Matter Expert 

TC = Technical Challenges 

VEH = Vehicle 


I. Introduction 

O NE focus area of the National Aeronautics and Space Administration (NASA), enabled through the Aviation 
Safety Program (AvSP) of the NASA Aeronautics Re search Mission Directorate, is to improve aviation safety. 
The AvSP 1 (http://www.aeronautics.nasa.gov/programs_avsafe.htm) seeks to provide increasing capabilities to: 
• predict and prevent safety issues 

• monitor for safety issues in-flight and lessen their inpact should they occur 
• analyze and design safety issues out of complexsystembehaviors 
• analyze designs and operational data for potential hazards 
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Within this domain, the issueofrunway safetyis onethrustofinvestigationandresearch. One component of the 
runway safety thrust is that of runway incursion (RI) events. Runway incursions, as defined by the Office of 
Runway Safety 2 of the Federal Aviation Administration (FA A), are the incorrect presence of an aircraft, vehicle or 
person on the protected area of a surface designated for the landing and take-off of aircraft, as reported by the 
respective air traffic control personnel. 

Looking into the literature on this topic, a recent NASA study on non-towered airports 3 indicated that the number 
of RI events is increasing with time, with about half of the events being of low severity and the remainder be ing split 
among moderate, high, and severe RI events. Among these events, intersecting runways are noted as the highest 
contributing factor. ArecentpresentationbytheBoeingCompany 4 shows that flighthours, departures and the size 
of the worldwide fleet have generally increased, while accident rates have remained essentially flat (but at a very 
low level) overthe last 20years ; the same presentation points to about 6% of all accidents being associated with 
final approach, landing, takeoff, and initial climb. A recent U.S. Department of Transportation, Volpe Center 5 
report shows that the spacing of parallel runways has just a small effect (if any) on the number of RI events across 
all severity categories; the same reports illustrates that crossing thehold short line, entering therunway, and crossing 
a runway as the most likely types of RI events. A recent journal article 6 illustrates a dramatic increase in the number 
of RI reported in 2008 compared to previous years, with pilot deviations always being the largest source of these 
events. A recent FA A report 7 described the strong correlation among airport geometry, complexity, and various 
communication tools (including signage and runway markings) with RI events. A Pilots Association report 5 
illustrates the increase in RI events with air traffic, but with overall the RI event being less than 6 per million 
operations. This report also points to major domestic airports (Chicago, Atlanta, Dallas/Fort Worth, Los Angeles, 
St. Louis and Philadelphia) as havingthegreatestnumberofRI events. A paperby Chapman 9 suggests that pilots 
may rate the severity of RI events higher than the controllers that report them. 

To that end of imp roving runway safety, a statistical analysis 10 of the Runway Incursion (RI) Database 11 from the 
FA A Safety Information Analysis and Sharing (ASIAS) website was conducted to ascertain its relevance to the top 
ten technical challenges of AvSP. The information contained in the RI database was found to contain data that may 
be relevant to several of the AvSP ten technical challenges 1 areas including: 1) the assurance of flight critical 
systems [i.e., air traffic control (ATC) operations], (2) the discovery of precursors to safety issues, and 3) improve 
crew decision-making and response in complex situations. 

When combined with other data from the FAA, documenting air traffic volume from calendar years 2000 
through2011,theinitialstructureofagenericRIeventmodelemerges. This RI event model enables the study of 
causes of RI events and assessment of the effectiveness of NASA technology products at various airports and under 
various environmental andoperationalconditions. The generic RI event modelhas been implemented as aBayesian 
Belief Network (BBN) 12 ' 14 . Other similar efforts have been recently documented within a group working at NASA 
LaRC 12 ’ 15 ' 17 . 


II. Model Development 

The NASA Aviation Safety Program(AvSP) conducts cutting-edge research to produce innovative concepts, 
tools, and technologies that can improve the intrinsic safety attributes of current and future aircraft. The AvSP 
research centers around a set of Technical Challenges (TCs) that are aligned with program goals and project 
objectives. These TCs serve to focus research toward solving aviation safety problems and provide a consistent 
frameworkto focus, direct, plan, execute, manage, andcommunicate Center-distributed research. Among the TCs 
relevant to this work are: 

• Assurance of Flight Critical Systems (air traffic control operations) 

• Discovery of Precursors to Safety Issues 

• Assuring Safe Human-Systems Integration 

• Improve Crew Decision-Making and Response in Complex Situations 

Se veral recent BBN modehng efforts 12 ' 17 have been undertaken to support AvSP portfolio assessments and to 
determine if the AvSP technologies are addressing/mitigating aviation safety problems. The characteristics ofissues 
selected for modeling are: 

• A significant accident category based on the historical data and/or future trend 

• Alignment with the focus and research areas of AvSP 

• Broad coverage on AvSP safety technology products 

• Many underlying causal/contributing factors that lead to aviation accidents 

• Suitability for a high-level system analysis and modeling 
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The modeling philosophy includes the use of a generic, high-level, system-integrated modeling with a systems 
levelrisk-based causalmodel. It should capture themulti-dependencies (interactions) of causal and contributing 
factors from various problem domains . However, the modeling should not be a representation of a specific 
accident/incident case, nor a detailed simulation analysis. 

In general, the modelingstepsundertakeninclude: 1) determining the causalities and cause-to-effect relations 
based on the historical risks and anticipated future risks from safety data/database and literature reviews, 2) 
constructing a baseline risk-based causal model as aBBN, 3) conducting Subject Matter Experts (SME) Knowledge 
Elicitation (KE) sessions to review the baseline model structure and to elicit the Conditional Probability Table 
(CPT) values for the baseline model without product insertions, and 4) inserting the NASA safety 
technologies/products into the model and eliciting CPT values with products included. The expected modeling 
results include 1) a quantification of the likelihood/probability of concerned aviation risks, 2) an assessment of the 
direct risk mitigation effectiveness ofthe NASA safety techno logics/products, 3) a portfolio gap analysis and 4) a 
sensitivity analysis for risk drivers. 

As noted previously, the Office of Runway Safety of the FAA definition of an RI event is: The incorrect 
presenceofan aircraft, vehicle or person on the protected area of a surface designated forthe landing and take-off 
of aircraft. When this workbegun, these RI events were reported by air / ground traffic control personnel in the 
proper severity category (Cat) defined as: 

• Cat A = an accident or near miss occurred 

• Cat B = significant potential for collision existed 

• Cat C = ample time and/or distance existed to avoid a collision 

• Cat D = an RI event with no immediate safety consequences 

• Other = defined subsequently 

The FAA now uses the terms: Accident, Cat A (Near Miss), Cat B, Cat C, and Cat D and Other as noted above. 
To avoid ambiguity for the most important Cat A events, the RI event severity rankings used henceforth in 
this paper are: Accident, Near Mss, Cat B, Cat C and Other (including Cat D and other from above, mentioned 
for completeness butthis categorization will not be a subject of modeling or expert elicitation). For the purposes 
of this modeling effort, the scope of attention is restricted to aircraft involved. Cat C and above RI events, 
with movement restrictions to be defined subsequently. Forthe purposes of this model, RI events include at least 
two objects [aircraft (AC), vehicle (VEH) and/or person/ pedestrian (PED)] with one ofthe objects being the aircraft. 
Notallpossiblecombinationsofthesetwo objects are of interest to NASA, e.g., VEH in combination with VEH/ 
PED is not a subject of this study. Once initiated, RI events are short in duration and timing is critical; typical 
landing and takeoff times are 20 to 30 seconds and event severity can easily escalate with just slightly different 
timing. 

In this effort, RI events are modeled in three distinct phases: 1) the RI Event development phase (seconds to 
hours ) in which the circumstances develop that alio w the RI event to occur, 2) the RI Event initiation is the instant in 
time at which Object 1 (AC or VEH / PED considered together) incorrectly appears on the runway (RW ), and 3) the 
RI Event mitigation phase is the 20to 30 seconds in which oneormore mitigating actions by the involved pilot(s) 
and or PED / VEH driver may take place. 

The initial referenced data base includes 10459 RI events (with no narratives). Among these, seven were 
accidents, 1 10 were near misses, 1 14 were Cat B, 2014 were Cat C, and 3624 were Cat D. Another 4590 RI events 
in the data base were “Other”, listed as Cat E (not meeting the definition of an RI event), N/A (not applicable), or 
Cat P (decision pendingon categorization). Note that some runway excursion events started as RI events and were 
categorized as N/A in this database (e.g., August 27, 2006 crash at LEX resulting in 49 deaths - aircraft takeoff on 
wrong runway) 18 . Forevents without narratives, this initialdata set is useful for establishing overall probabilities 
related to the type of RI events that occur. The final data set consisted of 1596 RI events (Cat C and above, with 
brief narratives). Of these, there was just one accident (the others excludedbecause no narrative was provided by 
the FAA), 30 were near misses, 20 were Cat B and 1545 were Cat C events. Of the 1596 RI events, 1299 were 
causedby AC, 260were caused by VEH and 37 were caused by PED. The complete data time frame ranges from 
2001 through 2011, however, the narrative data time frame ranges from2007 through 2011. The modeling time 
frame ranges from 2007 through 2014 or possibly 2015 at the latest. 

It is important to realize that RI events are “people intensive”, involving possibly two pilots and possibly two 
controllers (when some formof split control such as air / ground is in effect). A VEH driver or PED could replace 
one of the pilots . There are also organizations (FAA, Airport Management, etc.) behind each of the people directly 
involved in the RI event. The Human Factors Analysis and Classification System (HFACS) by Wiegmann and 
S hap pel I are frequently used to describe the organizational, supervisory and personal factors states that establish 
preconditions for human errors and violations . Unfortunately , the narratives provided for the RI events do not 
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provide sufficient detail for a standard HFACS assessment. Hence, within this model, the HFACS states for all of 
the possible Rlevent participants are considered together as either being deficient (one ormore participant has 
HFACS issues, worst case) or fully adequate (no HFACS issues among any of the participants , best case). 

Furthermore, RI events are also “communication (Comm) intensive”: several instances of two party 
communications must simultaneously function properly in order to avoid problems. Two party communications 
involve both the content and transmission of information. The content must be correct and complete, timely and not 
too comp lexfor the situation. The transmission must be accomplished without garbled or blocked information 
exchanges. Instances of two party communications exist between all the involved people in the Rlevent. Taking 
this to the next level, split controllers are expected (by cockpit crews ) to act as a unified controller and cockpit crews 
involving a pilot and co-pilot are expected (by control) to operate as a unified ACoperator. Hence, any spilt entity 
needs adequate internal two party communications and adequate external two party communications must exist 
between the various entities. Failure of any part of this complexcommunication network results in deficient two 
party communications that can lead to confusion, a shared attribute among some or all of the participants. 

It is important to understand that the RI event severity rating is based strictly onthe time / distance. The severity 
rating does not consider the object Federal AviationRegulatio ns (FAR) vehicle classes, the potential for loss of life 
or damage to property, thecausalpath or error types, nor does it consider the HFACS states of the participants. In 
short, theexistingFAARIevent definitions pro videavery narrowway to examine runway safety, especially if the 
ultimate goal is to study the impact of technology injections. Many interesting questions can be posed and answered 
in the context runway safety events that do not directly support RI event modeling by the strict FA A definitions; 
answers to these additional questions would provide significant insightinto various aspects of possible technology 
injections and their effectiveness. During this worknumerous altemativemodels have been developed, discussed 
and discardedeitherbecause they did notprovide a satisfactory causalpath, orbecause they were deemed to be too 
complexfor use within the SME elicitation process. 

An attempt has been made to restrictthe Rlevent scenarios of interest within this study. Part of this reduced 
scope involves movement restrictions forthe objects involved. Object 1 (AC, VEH or PED) initiates the RI event 
and must be on the RW at the start of the RI event. Object 1, as an AC, arrived on the RW either by incorrectly 
landing on it, taxiing onto it, or (in the case of crossing runways) the AC may be landing or taking off on one RW, 
while a second AC (Object 2) is using the second RW. If Object 1 is VEH or PED, it is assumed to be an authorized 
agent of airport (an airport affiliated contractor or employee) that has moved onto the wrong runway or onto the 
correct runway but at the wrong time. Alternatively, the VEH / PED arrived on the RW by uncontrolled, 
inappropriate runway access either directly via the airport perimeter, orindirectly through the airport terminal; this 
case has been excluded fromconsideration. The second aircraft is either on the RW at the start of the RI event, or 
has just crossed the runway threshold prior to landing. 

An RI event perspective versus an aviation perspective has been adopted. This means that every situation 
considered herein is assumed to result in an aircraft involved, Cat Cor above Rlevent. Only controlled US airports 
are considered. The Rlevent time frame is assumed in the range fromsecondsto minutes. The FAR aircraft types 
of interest are Part 121 (Commercial) and Part 135 (Air - Taxi). These are considered together due to presumed 
similar equipment levels; this assumption was validatedby theSMEpanel. Another aircraft type of interest, and a 
major contributor to RI events, is Part91 (General Aviation), though discussion with the SME panel revealed that 
virtually any typeof aircraft may be operated as aPart 91 vehicle; thus the Part 91 distinction is not very useful in 
this context. Other categories of AC (military, maintenance taxi) are included in the data, but these are not exp licitly 
of interest in this study. The study considers pilot(s), controllers), and relevant objects (vehicles and pedestrians) 
on the ground. The study also indirectly considers various airport geometries, various weather and visibility 
conditions, and various operating conditions. These factors are consideredto be fixed during an RI event, whereas 
the participant HFACS states and two party communications are considered to be active during an Rlevent. 
Likewise, airport signs and markings are considered to be fixed mitigations during the RI event, whereas go- 
arounds, aborted takeoffs orotherevasive maneuvers are considered to be active mitigating actions performed by 
the object operators. 


III. Model Description 

A typicalBBN consists ofthe modelstructure and the modelcontent. The model structure consists of a set of 
relevant definitions, as well as the node names, the node states, the ordering of the defined states for each node to 
facilitate SME comment, the connecting link topology and the connecting linkpriority as they enter specific nodes 
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(again, to facilitate SMEcomment). The modelcontent consists of the sets of marginal and Conditional Probability 
Table (CPT) values . During the first phase of a typicalBBN development cycle, NASA researchers develop (based 
upon database and literature search) and pro pose a model structure to anSMEpanel; the development step may take 
months to complete. Then, the various elements of the proposed structure are reviewed, modified and validated by 
the SMEpanel. Once the model structure has been agreed upon and validated by the SME panel, a CPT elicitation 
process (model population) is conducted by a facilitator on behalf of NASA to determine the appropriate model 
content. Some portions of the modelreview, modification, validation and population can be conducted in parallel. 
Once the model has been populated, it is executed to obtain a set of baseline results and a baseline sensitivity 
analysis. 

At this point, a preliminary BBN RI event model has been developed. An SME panel consisting of four 
consultants was assembled to reviewthe model structure andto populate its content. The SME panel included two 
pilots and two other aviation expert consultants. The SME panel met over two days for about 14 hours of 
discussionaboutthe complexRI event problem. A preliminary baseline RI model was agreed upon, as shown in 
Figure 1; some ofthe model population was also accomplished; this is notdiscussedherein. The nodes in Figure 1 
are color coded to indicate associations among the various nodes. Generally, the flow of specific contributing 
factors through causal paths is fromleft to right in the figure. Many items funnel together through the two nodes 
identified as Fixed and Active Contributing Factors. The node identified as “RI Event Initiation” can be thought of 
as the start of the active mitigation phase of the RI event, which also ties back to the contributing factors. 

The SMEpanel validated many ofthe proposed definitions and most of the proposed model structure. However, 
the SME panel also provided significant clarification of several essential definitions within the RI event model. 
Moreover, the SMEpanel suggested several structural changes to the model, especially as related to thebest way to 
model the active mitigation phase of the RI events. The overall complexity of the proposed RI event model was 
reduced from39 nodes and a combined conditional probability table (CPT) size of 1041 elements to oneof 37 nodes 
and combined CPT size of 735 elements. The remainder of this sectiondescribes the current preliminary RI event 
model. Limited clarifying information is presented abo ut each of the nodes becauseof the remaining possibility that 
they may stillchange. The node name for each is presented along with some clarifying comments. Most ofthe 
nodes are binary, meaning they have only two possible states: yes or no; where more states are present in a node, 
this will be made clear from the explanation. ThegoaloftheSMEelicitationis to provide probabilities for each of 
the possible states; for example, for the node “Airport Layout”, the SMEgoalis to determine the probability of that 
the Airport Layout is an issue or not in the RI event. 

Starting with the yellow nodes of Figure 1 (lower left hand comer), the node descriptions of the preliminary RI 
event model follow: 

• Airport Layout: The airport layout is an issue. This may include potentially confusing elements such as 
parallelrunways(withspacingoflessthanlOOOfeet), intersecting runways, taxiways parallel to and near 
runways, numerous taxiways crossing runways instead of perimeter taxiways. 

• Signs, Markings and Equipment: The signs, markings and/orfixed equipment (e.g., lights) at the airport 
are deficient. 

• Average Traffic Volume: The average traffic volume at this airport, at this time, compared to other 
airports, is an issue. For example, if the average traffic volume is high, it may cause a significantly 
increased workload for controllers and/orpilots;iflow, it may result in extended periods of inactivity for 
controllers. 

• Non- Visibility Area for ATC: Areas of the airport not ever visible to controllers is an issue, 

• Other AirportIssues:Otherissuesthathavenotbeenenumerated withinthisgrouping are present. This 
may include inappropriate levels of security for the terminal and/or airport perimeter that may lead to 
unauthorized vehicles or pedestrians on the runway surface. 

• Airport Issues: One or more of the issues within this grouping are present. 

• Visibility: Conditions such that temporarily poor visibility (e.g., fog) is an issue, 

• Rain, Snow or Ice: Runway or taxiway contamination from precipitation is an issue. 

• Other Weather Issues: Other is sues thathavenotbeen enumerated within this grouping arepresent. This 
may include lightning, smoke or other factors. 

• Weather Issues: One or more of the issues within this grouping are present. 

• Local and National ATC Procedures: The use of ambiguous ornon-standardized ATC procedures is an 
issue, 

• ATC Staffing Levels : The staffingleveland/or workload management not appropriate for the situation is 
an issue. 
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• Similar Call Signs on Airport Environment: The presence of similar sounding, or similar looking, call 
signs on the airport environment is an issue. 

• Memory Aids : The lackof standardizationrelated to the useof memory aids for controllers (e.g., devices 
to remind the controller about a truck on RW ) is an issue. 

• Other Operational Issues: Other is sues thathavenotbeenenumerated within this grouping are present. 
This might include communication frequency congestion, too many AC on the same frequency at a given 
time, training operations in progress, etc. 

• Operational Issues: One or more of the issues within this grouping are present. 

• Fixed Contributing Factors: One or more of the following issues is present: Airport Issues, Weather 
Is sues or Operational Is sues. It is assumed that Fixed Contributing Factors do not change during the RI 
event. 

• Completeness / Correctness: The completenessor correctness of communicated information is an issue. 
This may include the lackof a required usage for a call sign. 

• Timeliness: The timeliness of information transmitted is an issue. Information may not have been 
transmitted at the appropriate time, i.e., it was not delayed. An assumed part of this may be that any 
follow-up action required based on the information communicated was also completed in a reasonable and 
timely manner. 

• Complexity: The complexity of information transmitted is an issue. An example from the RI event 
narratives of too much complexity was one set of several instructions transmitted together from controller 
to pilot that was confusing for this author even with the airport map being examined while reading the 
transmitted instructions. 

• Comm Content Error: One or more of the issues within this grouping are present. 

• Communications Transmission Error: Comm transmission is an issue. This may occur when the Comm 
systemfails to operate as expected and may include blocked (“stepped on” communications where one 
party cuts off the communications of another), partially blocked (garbled or inaudible Comm transmission), 
hardware limitations / malfunctions and/or faulty headset jacks or connections. 

• Two Party Comm Error: A Communications Content Error or a Communications Transmis sion Error has 
resulted in a Two Party Communications Error and is an issue. 

• Participant HFACS Issues : The Organization, Supervisory or Personal Factors states of one or more of 
the participants is an issue. 

• Active Contributing Factors : One or more of the folio wing is s ues is present : Two Party COMM Error or 
Participant HFACS Issues. It is assumed that ActiveContributingFactors may changeduring the RI event. 

The preceding discussion covers all the nodes on the left hand side of Figure 1. These are all the issues 
potentially present that enable the RI Event to occur. The nodes and states on the right hand side of the figure 
generically define a specific RI event, of which numerous types and combinations may occur. NASA would hope to 
be in a position to broadly address many, if not all, of these specific RI event types with technology injections. 
Starting with the cyan nodes of Figure 1 (middle bottom), the node descriptions follow: 

• Operator Error: The operator of Object 1 (Pilot or VEH Driver / PED) committed an error that 
initiated the RI event. The most common types of Operator Error are failure to hold short of a runway 
or using the wrong runway. 

• Controller Error: The controller committed an error that initiated the RI event. The most types of 
Controller Error are a loss of oversight (thecontrollerforgot about something under their control) or a 
Comm Content Error (e.g., the controller transmitted incorrect or incomplete information) 

• Mechanical Failure: A mechanical system (brakes, propulsion or controls) of Object 1 failed to work 
as expected res ulting in an RI event. A mechanical failure for a PED on the runway might be a broken 
leg. 

• AC Present: The RI event has been initiated by the incorrect presence of an aircraft (Object 1) on the 
protected area of a surface designated for the landing and take-off of aircraft. 

• VEH / PED Present: The RI event has been initiatedby the incorrect presence of a vehicle or person 
(Object 1) on the protected area of a surface designated for the landing and take-off of aircraft. 

• RI Event Initiation: An RI Event has been initiated or not. 

• Separation Distance: At the start of the RI Event, Object 1 and Object 2 are separated by a maximum 
distanceofonerunwaylengthasdefinedin Figure 2. It is understood that some runways are shorter 
and others longer. It is assumed the length of the runway in question is appropriate for the 
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capabilities/limitations ofthe aircraft involved. Figure 2 illustrates some of the possible combinations 
of positions and orientations for Object 1 and Object2. Object 1 (highlighted in red) is AC, VEH or 
PED incorrectly on the runway in question; it may be stopped, moving along the runway or crossing the 
runway in question. Object 1 can close to, or distant from, Object 2 (relatively speaking). Object 2 
(highlighted in blue) is assumed to be an involved aircraft that has either just crossed the runway 
threshold (still in the air) in the process of landing or it is already on the runway at the start of the RI 
event. Whether Object lis ontherunway,/?erse,orhasjustcrossedthe hold short line to the side of 
the runway, the path intersection point is defined to be on the runway in question. 

o State = Close: Object 1 is separated from Object 2 by a distance of 1/3 or less ofthe runway in 
question. 

o State= Medium: Object 1 is separatedfromObject2by adistanceoffrom2/3orlesstomoie 
than 1/3 of the runway in question. 

o State = Far: Object 1 is separated from Object 2 by a distance of fromone full runway length 
or less to more than 2/3 ofthe runway in question. The SME panel noted that if Object 2 (an 
approaching aircraft) has not yet crossed the threshold of the runway, there is sufficient 
dis tance and reaction time such that the RI Event should not be considered as Cat Corabove. 
Rate of Closure: The sumof the opposing velocity components along the runway in question, as 
defined in Figure 2. It is as s umed Object 2 has a velocity component primarily aligned with the runway 
in question. The contributing velocity of Object 1 to the Rate of Closure can be computed from 
trigonometric considerations of its path geometry, relative to the runway in question, and its velocity 
magnitude; thus if Object 1 is moving perpendicular to the runway in question, it contributes a zero 
velocity component to the Rate of Closure. 

o State = Fast: The rate of closure is in excess of 140 knots, 
o State = Medium: The rate of closure is between 80 and 140 knots, 
o State = Slow: The rate of closure is less than 80 knots. 

Reaction Time: The amount of time available for possible mitigating actions once an RI event has been 
initiated. 

o State = Short: eight seconds or less 
o State = Medium: nine to twelve seconds 
o State = Long: more than twelve seconds 

Mitigation Phase Error: An additional second error by an involved participant (the Object Operator or 
Controller) has occurred after the RI event has been initiated. 

Active Mitigation Effectiveness: The degreeof impact that applied mitigating actions (this includes 
Go-Arounds, Aborted Takeoffs and Other Evasive Maneuvers on the part of the Object 1 or Object 2 
Operators, whether commanded by a Controller or not) had upon the expected RI event severity 
outcome. Implied in this definition is an assumption that an SME can establish an expected RI event 
severity based upon the Rate ofClosureand the Separation Dis tance and a second assumption that some 
determination of the mitigation effectiveness can be made based upon on the Reaction Time available 
and whether or not a Mitigation Phase Error has occurred. 

o State = Ineffective: the applied mitigating actions had no effect upon the expected RI event 
severity outcome; this is thesame degree ofimpact thathaving applied no mitigating actions 
would have had upon the expected RI event severity outcome, 
o State = Partially Effective: as a result of the applied mitigating actions, a collision was 
avoided or a one-step reduction in the expected RI event severity was achieved 
o S tate = Fully Effective : as a result ofthe applied mitigating actions, a near miss was avoided 
or a two-step reduction in the expected RI event severity was achieved 
Final RI Event Severity: The RI event severity as would be reportedby the FAA, including the impact 
of Contributing Factors and Mitigating Actions is established here. As in the definitions provided 
earlier, this severity ranking here is based upon an SME assessment of time and distance. However, 
because of the structure of the preliminary RI event model, other factors that may come into 
considerationduringan official RI event classification meeting are present in the background of this 
model. 
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IV. Conclusions 

A preliminary Bayesian Belief Network (BBN) model for Runway Incursion (RI) events has been developed. 
Numerous considerations surrounding the process of developing the preliminary modelhave been documented in 
this paper. The proposed RI event model was thoroughly reviewed by a Subject Matter Expert (SME) panel. 
Numerous changes tothe model structure (definitions, nodenames, node states and the connecting link topology) 
were suggested by the SMEpanel. The structural details of the resulting BBN model for RI events have also been 
documented within this paper. 
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Figure 1. Runway Incursion Bayesian Belief Network Preliminary Model. 
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Figure 2. Geometric Considerations for the Runway Incursion Preliminary Model. 
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